Solana Ecological Cryptocurrency Wallet Solflare After several major attacks in the cryptocurrency industry, it has tightened internal security controls, restricting access to infrastructure and software changes.

Solflare indicates that recent encryption security incidents have prompted the company to restrict access to its infrastructure and code.

• Co-founder Vidor stated that all changes now require multiple approvals, and the team has also paused the addition of new content.
• A security incident involving a third-party staking service provider that occurred in October affected the keys used by the Solflare verifier.
• Solflare indicates that no customer funds were stolen, but affected users were temporarily unable to receive staking rewards.
• The wallet has extended the deadline for validator migration to November 30th and promises to compensate for any rewards missed between October 26th and November 1st.

Co-founders Solflare and Vidor stated in a statement on November 2 that the development team has entered "fortress mode," introduced multiple approval requirements, and ceased adding new content to the system.

Vidor writes: "After going through all that this month in this industry, we have closed off access to our infrastructure and code. Every change now requires multiple approvals, and no new content will be added anymore."

He admitted that these restrictions would affect the company's development progress and added, "It will slow us down, but I can accept that."

Solflare Tighten access to infrastructure and code

Solflare The latest security measures focus on controlling who can access their systems, as well as who can approve changes to the software.

Under the new arrangements, developers must obtain multiple approvals before modifying the infrastructure or code. As long as these restrictions remain in effect, the team will pause adding any new content.

Prior to the release of this announcement, on October 29th, a security vulnerability occurred at Binance, affecting approximately $6.3 billion in encrypted assets.

As previously reported by crypto.news, a preliminary investigation by Binance identified an engineer's laptop that may have been compromised as a potential entry point.

The exchange stated that attackers may have gained access to the internal infrastructure used for authorizing cryptocurrency withdrawals.

Another recent incident involves a leak of customer records from the Keystone wallet; the website of the hardware wallet manufacturer exposed buyers' personal information after unauthorized access.

Keystone indicates that the private key and mnemonic phrase have not been affected, however, the leaked customer information poses an additional risk of phishing.

The restrictions imposed by Solflare are aimed at its own operational system, whereas its most recent interruption in staking was due to an external service provider.

Solflare Validator Event Interrupts Staking Rewards

On October 27th, Solflare disclosed that its third-party staking service provider reported a security incident involving keys related to the verifier of that wallet, Solana.

In the initial notification, the company stated: "Our collateral service provider has informed us that a security incident has occurred on their side."

Affected validators will stop generating staking rewards until the provider completes the investigation.

Solflare explained that the SOL entrusted by users are still retained in their respective pledged accounts, which are controlled by the users' private keys.

The wallet stated: “Your SOL is secure,” and added that “no user funds have been touched.”

The company emphasizes that holding the verifier key does not imply that the operator has the right to transfer SOL from the pledged accounts entrusted by customers.

Blockchain monitoring data cited by Unchained shows that as of October 28, approximately 1.56 million SOL were entrusted to the affected validators.

This verifier has stopped voting and no longer generates rewards for these principals.

Another investigation conducted on October 29 by Bitquery traced unauthorized transfers involving keys related to multiple Solana validators, including those of the Solflare validator.

This blockchain analytics firm estimates that attackers transferred approximately $135,000 in assets from 5 validators.

The investigation results distinguished between the assets held by the verifier operators and the customer funds held in the entrusted pledged accounts.

Solflare Extends the deadline for pledge migration to November 30th

After the incident, Solflare established an alternative validator and began to guide affected users to transfer their delegated SOL.

The company initially set November 1st as the deadline for users who wished to receive compensation for missed staking rewards.

However, the latest announcement has extended the migration deadline to November 30th.

The wallet tells users: “You can now transfer your staking to the new Solflare validator before November 30th.”

Solflare To confirm, for users who have completed the transfer during the migration process, the company will compensate for the missed staking rewards from October 26th to November 1st.

The company has launched an in-app process to help customers transfer their stakes to alternative verifiers.

Users can update the Solflare application and complete the process according to the migration instructions.

Once the transferred SOL becomes active on the new validator, the staking rewards will be restored.

The staking system of Solana is activated and deactivated through the network epoch. This means that some transfers may take a bit more time before rewards start to be generated.

Solflare Warn users to be cautious of fake migration links

In the initial security announcement, Solflare warned customers that scammers might take advantage of the validator migration to spread false guidance.

The wallet indicates that the entire process can only be carried out through its official app.

The company stated: "The migration will only be carried out through the Solflare application. We will never send you private messages or links."

This warning was issued after a provider incident, during which users needed to replace their verifiers in order to restore their staking rewards.

The countermeasures taken by Solflare occurred during a period when other crypto companies implemented emergency restrictions following security vulnerabilities.

After recently discovering unauthorized activities in its system, the Brazilian exchange Mercado Bitcoin has suspended customer withdrawals.

For users with the identifier Solflare, the latest guidance remains: to complete the verifier migration through the wallet application by November 30th.

The company promises that for customers who complete this process, they will be compensated for the 6 days of missed staking rewards.